Meta tags:
description=Various ramblings on Information Security topics;

Headings (most frequently used words):

2008, security, for, interesting, information, bits, 11, infosec, your, and, recap, rsa, europe, day, ramblings, the, blog, has, moved, 07, 06, 05, 04, resources, to, increase, info, knowledge, benefit, career, 03, who, needs, employee, exit, procedures, disaster, recovery, plans, are, whimps, most, popular, posts, categories, archives, blogroll,

Text of the page (most frequently used words):
the (136), and (81), security (74), you (57), 2008 (51), that (50), are (45), for (45), #interesting (41), information (35), bits (31), have (24), with (23), your (23), this (22), blog (20), has (20), kevin (20), will (19), web (17), day (17), more (17), good (16), how (15), com (14), rsa (14), #europe (14), about (14), what (14), today (14), data (13), not (13), can (13), business (13), from (13), career (12), posted (12), here (12), get (11), like (11), comments (11), infosec (11), november (11), was (11), don (11), wordpress (10), riggins (10), permalink (10), off (10), feed (10), http (10), there (9), going (9), one (9), things (9), know (9), some (9), out (9), systems (9), article (9), subscribe (8), now (8), application (8), network (8), these (8), but (8), want (8), they (8), them (8), our (8), access (8), read (8), around (8), www (8), ramblings (7), news (7), recap (7), who (7), posts (7), where (7), all (7), point (7), must (7), well (7), org (6), disaster (6), recovery (6), been (6), time (6), new (6), which (6), should (6), others (6), into (6), applications (6), great (6), cybercrime (6), those (6), rss (6), software (6), site (5), privacy (5), free (5), testing (5), most (5), other (5), were (5), next (5), much (5), points (5), when (5), use (5), make (5), his (5), protect (5), need (5), being (5), home (5), just (5), doing (5), post (5), looks (5), very (5), after (5), enjoy (5), daily (5), fun (5), pci (5), phone (5), afternoon (5), everybody (5), hope (5), reader (4), report (4), subscribed (4), already (4), hacker (4), place (4), firefox (4), needs (4), benefit (4), tagged (4), long (4), few (4), short (4), talk (4), released (4), probably (4), change (4), another (4), yourself (4), become (4), start (4), protecting (4), said (4), such (4), than (4), world (4), thought (4), first (4), cool (4), her (4), she (4), also (4), sure (4), administrator (4), cloud (4), android (4), latest (4), correlation (4), infosecramblings (4), started (3), website (3), email (3), manage (3), log (3), techdulla (3), research (3), portswigger (3), net (3), knowledge (3), vulnerability (3), processes (3), general (3), feedburner (3), employee (3), plans (3), moved (3), while (3), several (3), days (3), years (3), browser (3), then (3), only (3), event (3), published (3), made (3), path (3), gap (3), analysis (3), step (3), course (3), managing (3), agree (3), number (3), finally (3), coviello (3), driven (3), often (3), compliance (3), many (3), perimeter (3), had (3), would (3), conference (3), hackernomics (3), stuff (3), control (3), because (3), again (3), isn (3), malicious (3), over (3), via (3), find (3), flash (3), done (3), does (3), says (3), see (3), let (3), film (3), rights (3), plan (3), backups (3), still (3), remote (3), patel (3), any (3), computing (3), cnet (3), linux (3), help (3), certs (3), sans (3), cert (3), getting (3), pen (3), version (3), tool (3), design (2), required (2), comment (2), bar (2), content (2), sign (2), create (2), edge (2), taosecurity (2), core (2), schneier (2), kees (2), leune (2), hack (2), aut (2), life (2), may (2), august (2), october (2), archives (2), app (2), tips (2), risk (2), review (2), links (2), communication (2), bloggers (2), exit (2), procedures (2), whimps (2), resources (2), increase (2), info (2), talks (2), three (2), couple (2), never (2), realized (2), real (2), money (2), developed (2), last (2), did (2), paper (2), faced (2), reading (2), back (2), enisa (2), two (2), future (2), both (2), down (2), best (2), either (2), once (2), part (2), batten (2), statements (2), own (2), challenge (2), process (2), instead (2), aligned (2), used (2), current (2), situation (2), manner (2), appropriate (2), user (2), possible (2), above (2), important (2), thinking (2), ways (2), quite (2), enterprises (2), ineffective (2), executive (2), trip (2), thompson (2), even (2), attackers (2), longer (2), take (2), worth (2), facets (2), way (2), age (2), method (2), scads (2), lives (2), books (2), bruce (2), finding (2), client (2), side (2), prajakta (2), showed (2), problems (2), domain (2), injection (2), video (2), related (2), researcher (2), different (2), meet (2), fortify (2), linkedin (2), continuity (2), passwords (2), individual (2), work (2), apparently (2), terminate (2), story (2), fired (2), drive (2), situations (2), system (2), leave (2), available (2), pencil (2), apparent (2), term (2), pratt (2), put (2), took (2), actions (2), using (2), keep (2), running (2), owasp (2), events (2), presentations (2), mobp (2), lori (2), patch (2), better (2), google (2), microsoft (2), html (2), articles (2), mentor (2), somebody (2), willing (2), questions (2), give (2), their (2), offer (2), question (2), virtualization (2), windows (2), setup (2), source (2), chapter (2), anything (2), move (2), technology (2), okay (2), adobe (2), critical (2), tenable (2), engine (2), archive (2), nice (2), truecrypt (2), encryption (2), mac (2), dns2tcp (2), upgrade (2), easily (2), anti (2), virus (2), antivirus (2), xorg (2), parallels (2), why (2), add (2), makes (2), defining (2), check (2), rogue (2), nmap (2), vlans (2), isolate (2), traffic (2), changes (2), various (2), topics (2), name, write, loading, collapse, subscriptions, view, account, writequit, vitalsecurity, revolution, solution, guerilla, ciso, dark, visitor, bleeding, mike, incite, rants, rsc, rational, pauldotcom, community, observations, digitally, enlightened, mind, mediaphyter, marcus, ranum, jeremiah, grossman, box, ckers, lab, george, starcher, ethical, episteme, belief, wisdom, didier, stevens, disce, discede, anton, chuvakin, warrior, andy, itguy, adventures, adam, investigator, blogroll, march, april, june, july, september, scanning, uncategorized, tools, secure, coding, scc, assessment, red, team, malware, program, conferences, cdc, awareness, categories, proud, member, popular, search, nov, 2026, previous, entries, centric, went, enough, updates, along, stake, virtual, worlds, became, chance, raised, users, behavioural, marketing, suprising, intersesting, none, less, pubished, press, presented, white, papers, near, summaries, massively, multiplayer, online, games, european, agency, dialogue, mentioned, planning, ten, road, statement, company, determine, happen, determined, chosen, notice, expect, perceive, navigate, plotted, strengths, weaknesses, goals, plot, offered, insight, prescription, summed, chris, director, acumin, greatly, integral, crown, jewels, walls, contain, fear, ourselves, evil, morphed, regulation, complied, therefore, understand, accomplish, keys, kingdom, unobtrusive, alluded, cases, enterprise, internet, trusted, third, parties, controls, useless, sits, ensuring, publish, securely, perimeters, porous, customers, partners, internal, ever, before, means, defenses, inadequate, dealing, attacks, targeted, contained, old, crunchy, shell, chewy, center, problem, tasked, central, determining, concentrating, efforts, model, compress, concise, following, arthur, vice, president, emc, innovative, folks, somewhat, rested, london, enjoyed, below, hang, technorati, tags, gave, drove, era, motives, factor, financed, motivated, interested, opposed, wanting, posits, five, laws, economics, herbert, chief, strategist, peope, rest, keynote, delved, happening, moving, forward, aren, ability, delete, built, ephemeral, stored, past, conversation, hall, worker, disappeared, soon, instant, messaging, skype, methods, electronic, transport, becoming, primary, conversations, sticking, byproduct, generating, happens, moderated, computers, think, telephone, calls, credit, card, purchases, bought, amazon, generate, always, say, share, talked, talking, essays, nuggets, resonated, technologist, cto, counterpane, concern, authentication, issues, disturbing, percentage, session, apps, exist, based, includes, xss, cross, privilege, escalation, interseting, action, script, functions, onmetadata, function, setclipboard, exactly, runtime, instantiation, jagdale, hewlett, packard, blinded, widespread, developers, perpetrating, kicked, anybody, vigilant, focused, successful, hello, busy, attended, sessions, during, catalyst, twits, together, happened, evening, later, without, further, ado, commissioned, creation, explores, job, showing, defacements, individuals, rack, bragging, hacked, big, face, screening, panel, discussion, kids, disable, accounts, departing, personnel, double, administrative, accessed, backup, test, same, spot, didn, poor, existed, revoke, list, failures, contractor, retaining, causing, mischief, nor, however, really, ought, order, admin, wait, month, break, pad, visits, directions, ingredients, bake, fail, cake, definitely, wrong, frankly, dealt, too, weeks, recover, per, actually, conviction, pryavrat, contract, employment, terminated, martin, written, responsibility, writing, watching, nyc, appsec, yup, toorcon, target, map, burp, suite, features, major, release, corner, filtering, deleting, applies, destination, journey, haven, patches, flaw, gander, trojans, huge, china, tops, exploits, inc, guides, growth, 24509, link, bunch, mentoring, relationship, apply, bounce, experience, hit, familiar, second, opinions, helpful, left, reap, benefits, items, listed, update, ahead, suggestions, platform, vms, dvl, against, virtualbox, damn, vulnerable, project, webgoat, hackthissite, hackquest, learnsecurityonline, book, portswiggger, handbook, engineering, learn, people, else, naisg, nearby, strong, cyber, infragard, associations, watch, garret, gee, usually, comes, across, infosecevents, cheap, worthwhile, defcon, cons, firewalls, ids, etc, agnostic, technical, gold, silver, base, build, gsec, might, follow, requesting, specific, come, suggested, obviously, exhaustive, recommend, toward, tester, note, asking, geekgrrl, finds, hole, thiefs, exploiting, retail, checkout, sale, shopping, cart, hacking, man, cops, phony, code, shoplifting, scheme, register, title, demystified, description, worm, trying, advantage, ms08, 067, secureworks, 31st, hat, tip, xavier, rootshell, open, fly, disk, vista, documentation, taken, care, dev, random, planet, heidi, guidance, effective, importantly, results, assuming, breach, scary, allows, quickly, suck, cell, smart, locking, keyboards, puppies, csi, stick, copy, computer, forensics, investigation, response, oops, wpa2, run, right, researchers, found, tkip, key, frame, safe, wpa, cracked, powered, gets, informationweek, ax0n, hir, conf, openbsd, macbook, tells, uses, everything, putting, adblock, richard, saying, mobile, device, nifty, detect, wireless, aps, wireside, discovering, damon, fills, spots, vulnerabilities, typical, startup, penned, pointing, excellent, grown, architectural, rather, consider, valuable, simple, existing, applied, emerging, cutting, concepts, shouldn, transparent, https, feeds, easier, consideration, decided, decision, nothing, service, provided, hosted, backtrack, usb, persistent, nessus,

Text of the page (random words):
the web csi stick so who has a copy of your phone sans computer forensics investigation and response this is both very cool and very scary tool that allows you to quickly and easily suck the data out of a cell phone or smart phone so much for locking the keyboards on those puppies assuming the breach what is good pen testing planet heidi has some good guidance for effective pen testing you should go read it if do them and more importantly if you get the results that s it for today have fun subscribe to my rss feed if you enjoy these daily interesting bits posts kevin comments off on interesting information security bits for 11 05 2008 interesting bits permalink posted by kevin riggins interesting information security bits for 11 04 2008 november 4 2008 good afternoon everybody i hope your day is going well here are today s interesting information security bits from around the web dev random blog archive critical dns2tcp vulnerability looks like dns2tcp has a vulnerability that needs to be taken care of time to upgrade truecrypt free open source on the fly disk encryption software for windows vista xp mac os x and linux documentation a new version of truecrypt is out version 6 1 was released on october 31st 2008 hat tip xavier at http blog rootshell be research blog research secureworks a very nice description and review of the worm that is trying to take advantage of ms08 067 pci blog compliance demystified blog archive cloud computing security and pci another good article about pci and cloud computing tenable network security log correlation engine 3 0 released like the title says tenable has released a new version of their correlation engine man cops to 1m phony bar code shoplifting scheme the register real life shopping cart hacking security at the point of sale an interesting article about the different ways that thiefs are exploiting retail checkout systems core security finds critical adobe reader hole latest security news cnet news looks like it s time to patch adobe reader again that s it for today have fun subscribe to my rss feed if you enjoy these daily interesting bits posts kevin comments off on interesting information security bits for 11 04 2008 interesting bits permalink posted by kevin riggins resources to increase your info security knowledge and benefit your infosec career november 4 2008 geekgrrl posted a note on her blog asking this question 1 how would you recommend getting started on a career toward network security network pen tester she has some follow up questions to that first one requesting some specific information go read her post and then come back okay here is what i suggested obviously not exhaustive here is a good blog post that might help http www leune org blog kees 2008 10 tips for getting started 1 html 1 certs if you want to be technical i would start with the sans gsec cert make sure you go for the gold cert and not just the silver this cert will give you a good base to build on from there move on to firewalls ids etc as appropriate sans certs are the best technology agnostic certs around 2 cons defcon cheap and worthwhile keep doing what you are doing watch and read the presentations after they are posted garret gee over at infosecevents usually posts links to archives when he comes across them 3 associations see if there is an infragard chapter nearby free and often strong in cyber security start a chapter of http www naisg org you will probably learn more and meet more people that can help you doing this than anything else 4 books security engineering is a great source for web app security testing the the web application hacker s handbook book by portswiggger is great 5 other http www learnsecurityonline com is a great site http www hackquest de a challenge site http www hackthissite org another one the webgoat project by owasp is also cool damn vulnerable linux is interesting finally virtualbox is a great free virtualization platform for windows and linux that will let you setup vms like dvl to hack against go ahead and offer up your suggestions in the comments update on the drive home i today i was still thinking about this question and i realized i left off one things that an individual can do that will probably reap more benefits than any of the items listed above find a mentor find somebody who has been in the business for a while who is willing to let you bounce questions off of them and is willing to give you the benefit of their experience when you hit situations that you are not familiar with somebody who can offer you those second opinions that can be so helpful here is a link to a bunch of articles on finding a mentor and the mentoring relationship the articles are not infosec related at all but still apply http www inc com guides growth 24509 html kevin 3 comments career tagged linkedin permalink posted by kevin riggins interesting information security bits for 11 03 2008 november 3 2008 good afternoon everybody i hope your day is going well here are today s interesting information security bits from around the web microsoft trojans are huge and china is tops in browser exploits latest security news cnet news an interesting report has been put out by microsoft that is worth a gander google patches android security flaw latest security news cnet news there is a patch available for your g1 phone better go get it done if you haven t already cloud computing it s the destination not the journey that is important lori has a very good point here you should go read her article because it applies to all of us portswigger net web application security mobp filtering and deleting content interesting things going on with the burp suite new features and a major release just around the corner portswigger net web application security mobp the new target site map more cool stuff toorcon x presentations infosec events yup more reading owasp nyc appsec 2008 video infosec events and watching network security blog pci compliance in the cloud get it in writing martin has written a article that you should read if you have any responsibility for pci that s it for today have fun subscribe to my rss feed if you enjoy these daily interesting bits posts kevin comments off on interesting information security bits for 11 03 2008 interesting bits permalink posted by kevin riggins who needs employee exit procedures and disaster recovery plans are for whimps november 3 2008 this article talks about the conviction of pryavrat patel for actions he took after his long term contract employment with pratt read was terminated now what mr patel did was definitely wrong but frankly pratt read should probably put some thought into how they dealt with the situation too it took them two weeks to recover from the actions of mr patel and per the article were actually using paper and pencil at one point to keep the business running so how do you bake a fail cake ingredients long term system administrator no apparent backups no apparent disaster recovery plan directions have system admin work on systems for 8 years terminate said administrator leave remote access available to administrator and also leave access rights in place wait one month and break out pad and pencil to manage business when the systems can t be used after administrator visits via remote access this isn t the first story of a fired employee contractor retaining access after being fired and causing mischief nor will it be the last however it does drive home a few things we really ought to be doing in order to protect our business not only from situations like this but in general the short list of failures i see in this story are no process to terminate remote access and revoke access rights apparently no backups apparently no disaster recovery plan or a very poor one if it existed so kids make sure you change those passwords and disable the accounts of your departing personnel make double sure you change the administrative user passwords on all systems that said individual accessed have a business continuity and disaster recovery plan and backup your systems finally test those plans and backups if they don t work you are still in the same spot as if you didn t have them in the first place kevin 1 comment processes tagged business continuity disaster recovery linkedin permalink posted by kevin riggins recap rsa europe 2008 day 2 november 2 2008 hello again day 2 of rsa europe 2008 was a busy one i attended several sessions during the day and then the security catalyst security bloggers security twits get together happened that evening this post will only talk about the day the meet up post will be later without further ado let s get to it the new face of cybercrime film screening and executive panel discussion fortify fortify commissioned the creation of a short film that explores what cybercrime looks like in today s world the film was well done and does a good job of showing that cybercrime is no longer about how many defacements malicious individuals can rack up it isn t about bragging rights on which systems were hacked cybercrime is big business these days those perpetrating it are doing it for money as such they don t want to get kicked out of you systems and don t want anybody to know they are there it is a different world and we need to be vigilant and focused if we are going to be successful in protecting our enterprises blinded by flash widespread security flash developers don t see prajakta jagdale security researcher hewlett packard prajakta s session was an interesting one she showed us how most current problems we find in web apps also exist in flash based applications this includes things like xss cross domain privilege escalation data injection and others she also showed some interseting things that can be done with some action script functions like onmetadata a video related function setclipboard which does exactly what it says and runtime instantiation of more concern is her finding of client side authentication and other client side issues in a disturbing percentage of applications the future of privacy bruce schneier security technologist and cto bt counterpane bruce always has interesting things to say i will share that most of what he talked about is stuff that he has been talking about in his essays and on his blog that being said here are a few nuggets that resonated with me data is a byproduct of the information age systems are not generating scads and scads of data on you because they are malicious it just happens as more and more facets of our lives are moderated by computers think about email telephone calls credit card purchases books bought via amazon all of these generate data ephemeral data is now stored in the past the conversation you had in the hall with your co worker disappeared as soon as it was over now with email instant messaging skype and other methods of electronic transport becoming more and more the primary method of communication those conversations are sticking around we aren t in control of that data we don t have the ability to delete all the data that is being built up about us because we don t control it again this isn t malicious it s just the way things are in the information age the rest of the keynote was quite interesting as he delved into many facets of what will be happening moving forward hackernomics herbert h thompson ph d chief security strategist peope security dr thompson gave a great talk that drove home even more that we are in an era where the motives of today s attackers are no longer about the cool factor it is a business and we are being faced with well financed and motivated attackers who are interested in what we have as opposed to just wanting to take us down he posits five laws of hacker economics which is worth a read good stuff another good day at the conference kevin technorati tags rsa europe 2008 hackernomics cybercrime comments off on recap rsa europe 2008 day 2 rsa europe 2008 tagged cybercrime hackernomics rsa europe 2008 permalink posted by kevin riggins recap rsa europe 2008 day 1 november 1 2008 hi there folks i am home and somewhat rested from my trip to london for the rsa europe 2008 conference it was a great trip and i enjoyed the conference below is a recap of my first day this is going to be long so hang in there information security from ineffective to innovative arthur w coviello jr executive vice president emc if i had to compress mr coviello s talk into a few concise points they would be the following concentrating all our information security efforts at the perimeter is an ineffective model in today s world the data we are tasked with protecting must become central to our thought processes when determining how to protect our enterprises information security must be business aligned point number 1 our perimeters have become quite porous this is by design as such customers partners and others have much more access to internal systems than ever before this means that perimeter defenses are inadequate in dealing with attacks that are targeted at the data contained in the applications which are published to the world it s the old crunchy shell vs chewy center problem point number 2 as alluded to above in many cases the data and applications most important to the enterprise are being published to the internet or to trusted third parties in such a manner that perimeter controls are next to useless in protecting them we must start thinking of ways to protect the data where it sits and ensuring that the applications we publish are developed as securely as possible point number 3 finally mr coviello said that information security must become business aligned we used to be fear driven i e we must protect ourselves from the evil out there that has morphed into our current situation where we are often compliance driven i e regulation x must be complied with therefore we must do y the next step is to be business driven we need to understand what the business needs to accomplish what the keys to the kingdom are and how to protect them in a manner that is risk appropriate and as unobtrusive to the user as possible i agree with all the points he made it will be a challenge but we will benefit greatly if we can become an integral part of the business process and start protecting the crown jewels instead of the walls that contain them managing your own security career chris batten managing director acumin mr batten offered some insight into how to manage you information security career his prescription for managing your career is summed up in three statements know yourself know others do a gap analysis know yourself if you don t know yourself i e strengths weaknesses goals how can you plot a course to get you to where you want to go know others if you don t know what others expect or how they perceive you how can you navigate the course you have plotted to get to where you want to go do a gap analysis once you know yourself know others and have determined where y...